Home Blog

Vista Security 2012 Removal – How to Get Rid of Vista Security 2012 once for all

Posted by in Blog Rogue Program
on September 20th, 2012 | Leave a comment
remove Vista Security 2012

remove Vista Security 2012

Vista Security 2012 is one of the most popular fake security programs. It is distributed by the same hacker of XP Security 2012 and Win 7 Security 2012. Such fake programs are the same in nature. They are created to cheat money by fake security alerts. When Vista Security 2012 is installed by users or Trojans, it will display a message imitating Microsoft and inform users the computer is infected by virus. When users click on the message, fake scan will run and scaring scan report will be produced to lure users into purchasing registered version for virus removal. To make users believe the scan report, Vista Security 2012 causes many problems on the pc, for example internet access is blocked and programs can not run. Nowadays, rogue programs become so common and users have higher vigilance. The most important issue is how to remove Vista Security 2012 completely.

Manual removal instruction
Manual way to remove Vista Security 2012 will take some time and require some skills.
1. Run Task Manager by press Ctrl+Alt+Del simultaneously and kill processes with abnormal name such as
ppn.exe
2. Search the following files and delete them

%AllUsersProfile%\U3F7PNVFNCSJK2E86ABFBJ5H
%LocalAppData%\ppn.exe
%Temp%\U3F7PNVFNCSJK2E86ABFBJ5H
%LocalAppData%\U3F7PNVFNCSJK2E86ABFBJ5H
%AppData%\TEMPLATES\U3F7PNVFNCSJK2E86ABFBJ5H

3. Click start – run – type in Regedit and press Enter to open Registor Editor. Find out the following entries and remove them

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\BrowserEmulation “TLDUpdates” = ’1′
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “%1″ %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%LocalAppData%\kdn.exe” -a “C:\Program Files\Internet Explorer\iexplore.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = ’1′
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = ’1′

Notes: users who do not know how to modify windows registry should not try manual way to remove Vista Security 2012. Windows registry is an essential and complicated part in system. It stores important settings and data.

How to get rid of Vista Security 2012 effectively
Since the software is classified as malware infection, the best way to get rid of it should be using an effective virus removal program which has detection on the malware. Apparently, your antivirus program can not remove the virus and you are looking for a better removal program. I will recommend Spyware Cease to you. It is a comprehensive antispyware program that can remove Vista Security 2012 completely and fix problems caused by the malware such as disabled internet access and system vulnerability.

Leave a Reply